Bump GitHub Actions: checkout/setup-node to v6, upload-artifact to v7, download-artifact to v8, cache to v5

[dgee2]

Why these dependencies were grouped together

All updated actions are first-party GitHub Actions infrastructure used across main.yml and dependency-update.yml. They are updated together as a single simple version-bump PR because none require code changes — only the @vN tag references need updating. The dorny/paths-filter SHA pin was not changed (it already pointed to v4.0.1); only the adjacent comment was corrected from # v3.0.2 to # v4.0.1.

Action	Before	After
actions/checkout	v4	v6
actions/setup-node	v4	v6
actions/upload-artifact	v4	v7
actions/download-artifact	v4	v8
actions/cache	v4	v5

Update type

This is a simple version bump — only action @vN references in workflow YAML files were changed; no source code or configuration required updating.

Best-practice changes

No best-practice change was introduced or suggested by this update. Decision: do not implement now.

Validation

The following commands were run and succeeded:

# YAML syntax check (no tab characters found)  ✅
cd worktrees/copilot-dependency-update-github-actions-simple/ui/menu-website
pnpm install --frozen-lockfile    ✅
pnpm run generate-openapi         ✅
pnpm run lint                     ✅
pnpm run build                    ✅ built in 851ms

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR updates first-party GitHub Actions versions used by the repository’s CI workflows, keeping the existing workflow logic intact while moving to newer major versions of the same Actions.

Changes:

• Bump actions/checkout and actions/setup-node to @v6 in dependency automation workflow(s).
• Bump artifact Actions to actions/upload-artifact@v7 and actions/download-artifact@v8 in the main CI workflow.
• Bump caching to actions/cache@v5 and correct the adjacent dorny/paths-filter version comment.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/main.yml	Updates artifact/cache action versions used by CI and corrects the paths-filter comment.
.github/workflows/dependency-update.yml	Updates checkout and Node setup action versions used by the dependency update workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.